Exact Las Vegas query costs for purification
with state-generating oracles
Abstract
Let a unitary oracle prepare a state from a known input, with probability of measuring answer , where for a known . We determine the minimax Las Vegas query cost of returning the more likely answer exactly in the transducer model, where each query is charged the squared norm of its queried component. Arbitrary unitary completions and potentially infinite-dimensional separable private space are allowed. With unrestricted controlled access to the oracle and its inverse, the optimum is , removing the additive unit in the bound of Belovs and Jeffery (Quantum 2026). If forward queries are confined to the known input ray and inverse queries to the generated-state ray, the optimum is , asymptotic to as . For every nonzero finite-dimensional oracle workspace, each optimum is attained by a transducer fixed over the whole promised family. The unrestricted construction pulls the answer reflection back to the known input without requiring knowledge of the resulting invariant plane; a four-oracle adversary proves optimality. For restricted access, a signed-Gram characterization proves the optimality of the earlier reciprocal-rescaling construction.
Note. This paper was generated entirely by AI, including MiMo, using an automated research pipeline developed by Chenghua Liu and Hanyu Li.
1 Introduction
A bounded-error quantum subroutine supplies more than a sample of its answer. Its unitary implementation can be reversed and, in principle, called on any input. Purification asks how to use this coherent access to return the subroutine’s more likely answer exactly. We study Boolean purification in the transducer model, where an exact public transformation is accompanied by an unchanged auxiliary vector in a private direct-sum space. The associated Las Vegas cost charges the squared norm processed by each oracle call. This is the resource that accounts for the use of a subroutine on a particular state under composition [2, 3].
The distinction between a state and a unitary is important even for this one-bit task. Write , where is a known input and measuring the answer qubit of returns with probability . We are promised that . The workspace may retain arbitrary garbage, and the action of on is unspecified. A purifier must therefore work for every unitary having the prescribed state-generation property. Queries away from can be useful, but an algorithm cannot choose a convenient completion and treat its action as known.
Belovs and Jeffery constructed an optimal reflecting-oracle purifier of cost and obtained cost for state-generating access [4, Theorem 1.5 and Corollary 1.6]. The additive unit has a concrete origin. Their reduction prepares on one branch of an equal superposition, applies the phase purifier, and uncomputes . The preparation and uncomputation each process squared norm . We remove these two calls by basing the purifier at the known input . The optimality of the reflecting-oracle primitive by itself does not show that this extra unit is necessary for the state-generating task.
There is also a more restrictive way to expose the subroutine: permit forward queries only on the input ray , and inverse queries only on the generated ray . This interface permits state generation and uncomputation, with coherent ancillary controls, but not queries on other directions. Belovs and Jeffery’s Open Problem B asks for the exact state-generating value and a restricted-query variant. We resolve the unrestricted question and determine the exact value for this bidirectional ray restriction. In particular, the older quadratic-in- restricted constructions cannot be improved to linear cost within this interface.
For a nonzero finite-dimensional workspace , let and denote the minimax Las Vegas costs with unrestricted and ray-restricted access, respectively. Both allow controlled and , including a non-query branch. The minimization is over one fixed transducer that serves all promised unitaries, and the maximum is over those unitaries and their completions. Section 2 gives the formal definitions.
Theorem 1.1.
For every nonzero finite-dimensional and every ,
| (1.1) | ||||
| (1.2) |
Both infima are attained using separable private space.
The first equality removes the preparation overhead without changing the oracle specification. The second identifies the exact cost of restricting query support. For example, when , the two costs are and , while the previous unrestricted upper bound is . As the gap vanishes,
Neither value depends on . These exact optima concern transduction with potentially infinite-dimensional private space, rather than finite-query zero-error algorithms in the ordinary circuit model.
To avoid preparing , we pull the known answer reflection back through :
where projects onto answer . Its expectation at the fixed input is , so the desired answer is encoded by the sign of this quantity. The span of and is invariant and has dimension at most two. Merely identifying that plane is not enough: its second basis vector depends on the unknown completion, and a change of basis using that vector would not be a legal work operation. We implement the line purifier of [4, Section 3.1] with counter shifts controlled only by and its complement. Thus its restriction to each unknown plane has the required two-dimensional action, while the circuit itself is fixed. The two oracle calls implementing each are offset by the factor from converting phase to bit; there is no separate preparation or uncomputation call.
The corresponding lower bound also has to see the entire oracle. Two boundary rotations distinguish the answer classes, but their adversary filter gives a constant strictly below . We include the negative of each active rotation, which preserves its answer probability. A joint adversary on these four unitaries has filter norm exactly . This proves the unrestricted optimum already on one answer qubit, and embeds into every workspace.
Under the ray restriction the completion instead drops out of the adversary identity. Its two query directions contribute opposite signs, leaving a difference of Gram matrices multiplied by . The earlier reciprocal rescaling of the answer blocks [1, Section 6.2] [3, Section 13.1] preserves cross-class inner products while reducing every squared norm to at most . Summing tensor powers then realizes the reciprocal kernel with exactly the cost in (1.2). A boundary pair of states attains the same overlap and gives a matching lower bound. This is an exact analysis of the existing rescaling mechanism. We also show why the two directions cannot be separated: using only one leaves same-label witnesses mutually orthogonal, forcing unbounded uniform cost (Proposition 4.2).
The proofs use one adversary identity, developed in Section 2. Its converse includes a unitary-extension argument for the whole oracle family, so the restricted witnesses define one transducer even though the family is uncountable. Sections 3 and 4 prove the two equalities.
2 Query model and adversary realizations
2.1 Oracle access and exact transduction
Let , let be a finite-dimensional Hilbert space with a designated unit vector , and put
An input is a unitary . Write
| (2.1) |
For a fixed , the promised family consists of all such unitaries with
| (2.2) |
Let in the first case and in the second. When both answer blocks are nonzero, the generated state can be written as
where the two garbage states are normalized. They may be complex, nonorthogonal, and unrelated across instances. A garbage state multiplying a zero coefficient can be chosen arbitrarily. The action of on is unrestricted.
We use the controlled arbitrary-unitary query convention of [1, 2, 4]. The bidirectional oracle is
| (2.3) |
with orthogonal forward and inverse direction labels. A query applies
Thus the circuit may coherently choose whether to query and in which direction. Oracles are specified as unitaries, not modulo global phase; a phase of an oracle block is observable relative to a non-query branch. Work operations are arbitrary fixed unitaries and are not charged to the query cost.
The public space is , with basis . An exact purifier is a fixed query circuit on , together with a choice of catalyst for every promised oracle, satisfying
| (2.4) |
The circuit has finitely many query gates. Its private space , query controls, and work unitaries are independent of the unknown oracle; may depend on it. Catalysts here are unnormalized vectors in a direct sum, not auxiliary tensor-product states supplied to an ordinary algorithm. A catalyst is included in the specification of the realization, as it need not be unique [3, Section 7.1].
For such a realization , let be the queried component immediately before its -th query, when the circuit acts on . Its Las Vegas query cost and its transduction complexity are, respectively,
| (2.5) |
Private space may be infinite-dimensional. The constructions below use separable space, with arbitrary fixed work unitaries. Work operations are not subject to a finite-gate synthesis requirement.
For the restricted interface, stack the query vectors using orthogonal query-time labels. We call the realization admissible if, for every , its total query vector has the form
| (2.6) |
Thus every forward query is supported on the designated input ray and every inverse query on the generated-state ray. The vectors contain all remaining controls and registers. Different control spaces can be embedded in one common control space. After the query,
| (2.7) |
where identity operators on controls are suppressed. Define
| (2.8) | ||||
| (2.9) |
In both infima, one fixed circuit must serve the entire promised family.
2.2 The adversary identity and its converse
Throughout, inner products are conjugate-linear in the first argument. Consider any exact state-conversion family , with one fixed transducer and catalysts . If denotes the component queried at step , telescoping inner products through the circuit gives
| (2.10) |
Here and below, oracle operators act identically on ancillary and query-time controls. To see the identity, an input-independent work unitary preserves each cross-instance inner product. A query changes that inner product from its pre-query value by . Summing these changes and subtracting the initial and final inner products cancels , because the catalyst is returned. Orthogonality of the query-time labels then gives (2.10), and is the query cost. This is the transducer form of the adversary identity [2, 4].
For the restricted upper bound we will construct query vectors directly from the generated states. To turn those vectors into a single circuit, we need the converse of (2.10) for the entire oracle family. Equal Gram matrices define an isometry on the closed spans, but in infinite dimension their orthogonal complements need not have equal dimension. An unused summand removes this obstruction.
Lemma 2.1 (Stabilized Gram realization).
Let be a Hilbert space and let satisfy for all . Set , where dimension means Hilbert-space dimension. There is a unitary on such that
In particular, a separable requires only a separable added summand, regardless of the cardinality of .
Proof.
The assignment , for finitely supported coefficient families, is well defined and preserves norms by the Gram identities. It extends to a surjective isometry between the two closed spans. After adjoining , the orthogonal complement of either span has dimension : it contains the new summand and its dimension is at most . Choose a unitary between these complements and take its orthogonal direct sum with the isometry of the closed spans. ∎
If query vectors satisfy (2.10), the two families
have equal Gram matrices. The lemma supplies a fixed unitary with
| (2.11) |
Applying the oracle on the query summand and then gives a canonical transducer. Its catalyst is , so both its query cost and its transduction complexity are . The added summand is non-query space and is unpopulated on every instance. This proves the needed converse without assuming finiteness of ; compare [4, Theorem 2.15].
Remark 2.2.
An arbitrary infinite-dimensional unitary need not admit a transduction on every public input. For example, let on , and declare public. The equation , with , forces the coefficient of in to be one for every , contrary to square summability. Our upper bounds instead either provide the catalyst explicitly or construct the work unitary from the entire equal-Gram family using Lemma 2.1.
3 Unrestricted queries
3.1 A purifier based at the known input
We first construct a phase purifier whose public input is . The construction has two parts: a reflection whose compression to the plane generated by records the answer probability, and a line walk that uses this plane without requiring its basis as input. Define
| (3.1) |
Each controlled call to is implemented by a controlled query, the known reflection on the same branch, and a controlled query. The two oracle queries process equal squared norms.
Fix an oracle and abbreviate . For , put
The identity , and its counterpart for , show that are orthonormal. They are respectively and eigenvectors of , and . Consequently,
| (3.2) |
is a unit vector orthogonal to . The plane is invariant, and in its ordered basis ,
| (3.3) |
Equation (3.3) isolates the completion dependence: the matrix is determined by , but its basis vector is not. The rank of and the garbage states do not enter that matrix. The next lemma implements the required walk using the projector onto , so no gate is defined by .
Lemma 3.1 (Line purifier on an unknown invariant plane).
Let be a fixed unit vector. Suppose a reflection has an invariant plane , where are orthonormal and
There is a fixed transducer, independent of and , whose operations depend only on and controlled access to , and whose public action is
| (3.4) |
Its reflection-query cost and the squared norm of its catalyst are
| (3.5) |
respectively. The same circuit has zero catalyst and cost one when or , with the corresponding public sign.
Proof.
We realize the weighted line purifier of [4, Section 3.1] using shifts controlled only by the known projector . Let , let , and define
Both are unitaries. With , set
| (3.6) | ||||
| (3.7) |
The shifts move the and components separately; on any invariant plane they therefore pair consecutive sites of a line. The conditional minus sign is oracle-independent. The public line is ; its orthogonal complement in the fixed space is private.
Put , and define orthonormal vectors
The closed span is invariant under both reflections. More explicitly, conjugating by the shifts in (3.6)–(3.7) gives, in the indicated ordered bases,
| (3.8) |
and . These blocks exhaust , with the only unpaired vector for . The matrix fixes and negates .
If , choose
Every paired coefficient vector of is proportional to . Both reflections fix the coupling, so . If , choose instead
Now every pair is proportional to . The first reflection sends to . The second fixes the boundary component and negates all remaining pairs, giving . The series converge in norm, with
| (3.9) |
At the first query, has moved every populated component to a nonzero counter value, so the queried squared norm is . Before the second query, leaves only the boundary component at counter zero; the queried squared norm is . Thus the total cost is . The basis and the catalyst depend on , but the circuit and the public/private decomposition do not. Finally, if , gives and . Only the first controlled query is populated, with squared norm one. ∎
Apply the lemma to and (3.3). The cases satisfy , respectively, and are covered by the last part of the lemma. The resulting phase transducer therefore works for every promised completion. Its circuit uses only , counter shifts, and the pulled-back reflection; the gap is needed only to bound the worst-case cost.
To turn the phase into a bit, take the direct sum of the identity on and the phase transducer on . Conjugate this operation by a Hadamard on the public space , extended as the identity on . For the phase catalyst , the resulting transformation is
In particular, neither Hadamard acts on the catalyst. Every query vector of the phase transducer is scaled by , halving its cost. Replacing each controlled by its two oracle calls doubles the cost, since the intervening known reflection preserves the queried norm. The factors cancel, giving
| (3.10) |
The chosen catalyst satisfies
| (3.11) |
This proves the unrestricted upper bound. The circuit does not use , and (3.11) gives transduction complexity on the promised family. One application contains four controlled query gates; the charged resource is their total queried squared norm in (3.10).
3.2 A matching four-oracle lower bound
Set
| (3.12) |
Choose by
Their difference satisfies
| (3.13) |
A two-instance adversary using only the boundary rotations has filter norm , yielding only . Pairing each rotation with its negative gives the sharper joint filter below.
On , define four oracles by
| (3.14) |
All four act as the identity on . They are legal inputs for every : their answer probabilities are or , and their signs can be absorbed into the garbage states. Let . When , the signs in (3.14) are global oracle signs, which are legitimate in the controlled-unitary convention fixed in (2.3).
Write . The public Gram difference is . Let be the total query vectors of any exact purifier on these four instances, and put . Order the instances as , and set
| (3.15) |
Each row of sums to one, so
| (3.16) |
We compute the norm of the Hermitian filtered operator
| (3.17) |
The active rotations have a common complex eigenbasis. In either forward eigenchannel, put . The low-to-high block of on the two sign indices is
| (3.18) |
It is diagonalized by the Hadamard matrix, with eigenvalues and . Since ,
and therefore . The high-to-low block is . The square of the corresponding Hermitian block is , so the Hermitian block has norm . The inverse direction replaces by , and the common identity action on contributes zero. Ancillary and query-time controls only amplify these operators by an identity. Hence
| (3.19) |
4 Queries on the prescribed rays
4.1 An exact signed-Gram characterization
Index the full promised family by , and write , , and . Its public Gram difference is
The restriction to rays turns the operator-valued adversary identity into a scalar kernel identity. The inverse direction contributes the negative of the forward filter; retaining this sign is essential.
Proposition 4.1 (Admissible adversary).
The value is the infimum of
| (4.1) |
over fixed Hilbert spaces and families , satisfying
| (4.2) |
Each feasible family is realized by one fixed admissible transducer with these pointwise query costs.
Proof.
For an admissible query vector as in (2.6), the forward contribution to (2.10) is
In the inverse direction,
Adding the two contributions proves (4.2), and the cost is .
Conversely, set
Equation (4.2) is precisely the adversary identity for . The construction in (2.11) already realizes this conversion. One can also prescribe the full public bit flip without any additional cost. For ,
| (4.3) |
where in bit indices denotes addition modulo two. Thus the two families indexed by ,
have equal Gram matrices. Applying Lemma 2.1 to these families gives a fixed work unitary. Preceding it by the query realizes with catalyst . For the required input , the catalyst is and the cost is , as claimed. The added summand is non-query space, so query support is preserved. ∎
In particular, the admissible optimization depends on an oracle only through its generated state. Its completion disappears from the signed-Gram constraint, even though the fixed transducer must work for every completion.
4.2 Solving the kernel constraint
For opposite labels, (4.2) asks for the reciprocal kernel . Summing tensor powers of the unit vectors would give this kernel formally, but the witness vectors would have infinite norm. The needed modification is to contract the vectors without changing these cross-class inner products. We use the reciprocal rescaling from [1, proof of Theorem 35] and [3, proof of Theorem 13.1], keeping its exact norm bound. Retain from (3.12), and set
For each instance, define
| (4.4) |
For opposite labels, the rescalings cancel on each answer block, so
| (4.5) |
At the same time,
| (4.6) |
Indeed, for a low instance, is increasing in , so its maximum on the promised interval is attained at . For a high instance the coefficients are interchanged; the resulting expression decreases in and is maximized at . Both maxima equal .
Thus the rescaling preserves precisely the inner products that occur in the cross-class constraints and makes every vector strictly contractive. Its tensor powers can therefore be summed in the full tensor Fock space
Define
| (4.7) |
The norm bound (4.6) makes this a well-defined vector with
| (4.8) |
Moreover, , so its inner products are given by an absolutely convergent geometric series:
| (4.9) |
This step is valid for complex inner products; no choice of real garbage states is involved.
Let , and choose
| (4.10) |
For equal labels, the two Gram terms in (4.2) cancel. For opposite labels, their difference is , so (4.9) verifies the constraint. Consequently, Proposition 4.1 gives one fixed admissible transducer with
| (4.11) |
The Fock space is separable because is finite-dimensional, and the stabilization adds only a separable non-query summand. The chosen catalyst has the same squared norm as the query cost. Its dependence on the class label in (4.4) and (4.10) is permitted: the work unitary is constructed once from all the Gram relations, and no gate receives the unknown label.
For the lower bound, choose any unit vector and consider
| (4.12) |
Each can be the image of under a unitary: extend and the chosen image separately to orthonormal bases and map one basis to the other. These are therefore legal low and high instances, and . Any feasible witnesses must satisfy
where the inequality is Cauchy–Schwarz applied to and . At least one cost is at least . Together with (4.11), this proves (1.2) and completes the proof of Theorem 1.1.
The opposite signs in (4.10) cancel every same-label constraint without restricting the within-class overlaps of the Fock vectors. This cancellation is essential. With only one query direction, distinct same-label inputs would require orthogonal witnesses, while each must retain a nonzero overlap with a fixed opposite-label witness.
Proposition 4.2.
For the full promised family, the uniform exact admissible cost is infinite if either all forward queries or all inverse queries are forbidden. This already holds for .
Proof.
Consider first the forward-only case, so in (4.2). For any positive integer , choose distinct and let
Fix a real high-probability state of the same form. For , the low states are distinct unit vectors, hence . The same-label constraints force . The opposite-label constraints give
because . In particular, every is nonzero. If all squared norms were bounded by a finite , Bessel’s inequality for the orthonormal vectors would give
Thus , which is impossible uniformly in . In the inverse-only case, the same-label constraints make the mutually orthogonal, while . The same absolute-value and Bessel estimates apply. The two-dimensional family embeds into by tensoring with a fixed unit vector of , so the obstruction holds for every nonzero workspace. ∎
The lower bounds use only finite subfamilies at a time and require no separability assumption. Allowing nonseparable private space therefore cannot lower either optimum, whereas the constructions attain both values on fixed separable spaces. Finite-dimensional approximate realizations of purification are treated in [3, 4].
References
- [1] A. Belovs. Variations on quantum adversary. arXiv:1504.06943, 2015.
- [2] A. Belovs and D. Yolcu. One-way ticket to Las Vegas and the quantum adversary. arXiv:2301.02003, 2023.
- [3] A. Belovs, S. Jeffery, and D. Yolcu. Taming quantum time complexity. Quantum 8, 1444 (2024). doi:10.22331/q-2024-08-23-1444.
- [4] A. Belovs and S. Jeffery. Space-efficient quantum error reduction without log factors. Quantum 10, 2039 (2026). doi:10.22331/q-2026-03-23-2039.